If you discover a security issue, please do not open a public issue. Instead, report it privately to the maintainer (see the contact in the repository profile). Include steps to reproduce and the potential impact. We'll acknowledge your report and work on a fix as quickly as we reasonably can.

• Homestead is a static front-end app. Authentication, storage, and AI are provided by Puter.js; account and infrastructure security for those services is handled by Puter.
• Each parent's data (students, progress, records, recordings) is stored in their own Puter account and is not shared by the app.
• Please never include real children's personal data in a report.

Thank you for helping keep families using Homestead safe.